Unscored severity · published Jul 11, 2013
CVE-2013-4685
Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is…
–
CVSS
7.6%
EPSS
No
On KEV
Description
Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 849100.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JO
Junos OS · Juniper
10.4; 11.4; 12.1; 12.1x44 · source: NVD
SR
Srx100 · Juniper
All versions, or not specified · source: NVD
SR
Srx110 · Juniper
All versions, or not specified · source: NVD
SR
Srx1400 · Juniper
All versions, or not specified · source: NVD
SR
Srx210 · Juniper
All versions, or not specified · source: NVD
SR
Srx220 · Juniper
All versions, or not specified · source: NVD
SR
Srx240 · Juniper
All versions, or not specified · source: NVD
SR
Srx3400 · Juniper
All versions, or not specified · source: NVD
SR
Srx3600 · Juniper
All versions, or not specified · source: NVD
SR
Srx550 · Juniper
All versions, or not specified · source: NVD
SR
Srx5600 · Juniper
All versions, or not specified · source: NVD
SR
Srx5800 · Juniper
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4685
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4685
Vendor Advisory
http://kb.juniper.net/JSA10574
osvdb.org
http://osvdb.org/95108
www.securityfocus.com
http://www.securityfocus.com/bid/61125
More from Junos OS
9.8
CVE-2023-36845
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
9.8
CVE-2020-1631
Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
5.3
CVE-2023-36851
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files
5.3
CVE-2023-36846
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files